Privacy Policy

This Privacy Policy describes how DeepSignal (“DeepSignal”, “we”, “our”) collects, uses, and shares information when you visit ai-deep-signal.com and use the services available on the site (the “Service”).

DeepSignal is the data controller for personal data processed through the Service. The Service is a global, free-to-read AI news reader; we do not currently sell, rent, or trade personal information to third parties.

1. Information we collect

1.1 Information you give us

• Account information — when you sign in with GitHub, Google, or a magic-link email, we receive your email address, your authentication provider's account identifier, and (if your provider returns them) your display name and avatar URL.
• Subscription information — if you subscribe to the Daily Brief, we store your delivery channel (email, Slack webhook, Feishu webhook, etc.), the destination address, your timezone, and your preferred delivery hour.
• Reading preferences — articles you save, like, dislike, or share; sources you mute; locale and theme choices.
• Feedback — anything you submit through the feedback form or contact email, including the email address you attach to it.

1.2 Information collected automatically

• Server logs — your IP address, user-agent string, referrer, the URL path you requested, and the response time, kept for up to 30 days for security and reliability purposes.
• Cookies — see Section 4 below.
• Analytics events — anonymous page-view and performance metrics, collected via Vercel Analytics and Vercel Speed Insights. These are aggregate metrics and are not tied to your account.

2. How we use information

We use the information described above to (a) operate the Service — sign you in, remember your preferences, deliver your Daily Brief, and store your saved articles; (b) communicate with you when you contact us; (c) keep the Service secure — detect abuse, rate-limit bad actors, debug errors; and (d) improve the product based on aggregate analytics. We do not use your personal data to train AI models.

3. Third-party services

DeepSignal is built on top of a small set of third-party platforms. Each handles a specific category of data:

• Vercel — hosting, edge runtime, and Vercel Analytics / Speed Insights for anonymous traffic and performance metrics.
• Supabase — managed Postgres database, OAuth / magic-link authentication, and file storage. All account data and reading preferences live here.
• OpenAI — generates article summaries and the Daily Brief. We send the original article text (already public) and the prompt template. We do not send your account information to OpenAI.
• Resend — delivers outbound email (Daily Brief, feedback replies, magic-link sign-in).
• Slack / Feishu / WhatsApp / Telegram — only when you explicitly add one of these channels as a subscription delivery target.

Each provider has its own privacy policy. We do not share your data with any party outside of these processors.

4. Cookies

DeepSignal uses a small number of cookies:

• Authentication cookies (essential) — set by Supabase Auth to keep you signed in.
• Preference cookies (essential) — store your language (ainh_locale), theme, browser timezone, and dismissal state of in-product banners.
• Analytics cookies — Vercel Analytics uses a first-party, anonymous identifier that does not track you across sites.

We do not use third-party advertising cookies today. You can clear cookies from your browser at any time; doing so will sign you out and reset your preferences.

5. Advertising

DeepSignal does not currently display third-party advertisements. If we enable advertising in the future (for example, through Google AdSense), this section will be updated to detail our advertising partners' data practices, including any use of cookies or device identifiers, the categories of data collected on their behalf, and links to their privacy and opt-out controls. We will update the “effective date” at the top of this page whenever ads are enabled.

6. Data retention

We retain account and subscription data for as long as the account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except for what we're required to keep for legal reasons (e.g. audit logs for security incidents). Server logs are kept for up to 30 days. Anonymous analytics aggregates may be retained indefinitely.

7. Your rights

You have the right to access, export, correct, or delete your personal data; to object to or restrict certain processing; and to withdraw any consent you previously gave. To exercise any of these rights, email contact@ai-deep-signal.com from the address associated with your account.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) gives you these rights directly. If you are a California resident, the California Consumer Privacy Act (CCPA) gives you equivalent rights, including the right to know what categories of personal information we collect and the right to request deletion. We honour both regimes.

8. Children

DeepSignal is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, email contact@ai-deep-signal.com and we will delete it.

9. International transfers

Our hosting (Vercel) and database (Supabase) operate primarily out of the United States and the European Union. By using the Service you understand your data may be processed in jurisdictions other than your own.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “effective date” at the top of the page and, for material changes, post a notice on the site for at least 14 days. Continued use of the Service after a change indicates acceptance.

11. Contact

For any privacy-related question or to exercise your rights, email contact@ai-deep-signal.com or use the Contact page.